Senior GRC Analyst

Job Summary

Leading the design and management of control frameworks, the full-time Senior GRC Analyst will implement risk workflows, conduct third-party risk assessments, and ensure compliance with industry standards and regulations.

Key responsibilities

• Design and govern control frameworks and risk workflows within the GRC platform to align with organizational objectives
• Oversee the development and maintenance of control libraries and monitor risk registers for accurate tracking and prioritization
• Conduct information security risk assessments and collaborate with internal teams to facilitate audits and compliance reporting

Required qualifications

• Bachelor's degree in information security, cybersecurity, computer science, or a related field, or equivalent experience
• Minimum of 8 years of relevant experience in governance, risk, and compliance functions within IT or information security
• Certifications such as Certified Information Systems Auditor (CISA) or Certified Risk and Information Systems Control (CRISC) preferred
• Prior experience with compliance frameworks like HIPAA, NIST CSF, and SOC 2
• Experience conducting risk assessments and supporting risk management activities